41 lines
873 B
Go
41 lines
873 B
Go
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"errors"
|
|
"net/http"
|
|
|
|
"inou/lib"
|
|
)
|
|
|
|
func handleDossiers(w http.ResponseWriter, r *http.Request) {
|
|
ctx := getAccessContextOrFail(w, r)
|
|
if ctx == nil {
|
|
return
|
|
}
|
|
|
|
LogMCPConnect(ctx.AccessorID)
|
|
|
|
// Use RBAC-aware function that returns only accessible dossiers
|
|
dossiers, err := lib.DossierListAccessible(ctx)
|
|
if err != nil {
|
|
if errors.Is(err, lib.ErrAccessDenied) || errors.Is(err, lib.ErrNoAccessor) {
|
|
http.Error(w, "Forbidden: invalid or unauthorized accessor", http.StatusForbidden)
|
|
return
|
|
}
|
|
http.Error(w, err.Error(), http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
var result []map[string]string
|
|
for _, d := range dossiers {
|
|
result = append(result, map[string]string{
|
|
"id": d.DossierID,
|
|
"name": d.Name,
|
|
})
|
|
}
|
|
|
|
w.Header().Set("Content-Type", "application/json")
|
|
json.NewEncoder(w).Encode(result)
|
|
}
|